CVE-2026-20039 - Vulnerability Analysis

Overview

Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software contain a denial of service vulnerability caused by ineffective memory management in the VPN web server, letting unauthenticated remote attackers cause device reloads by sending crafted HTTP requests, exploit requires no special privileges.

Severity & Score

Impact

Unauthenticated remote attackers can cause device reloads, resulting in denial of service.

Mitigation

Update to the latest available version of Cisco Secure Firewall ASA and FTD Software.

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-SpOFF2Re

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner